Description

Cross-site request forgery (CSRF) vulnerability in the retrospam component in wp-admin/options-discussion.php in WordPress 2.0.11 and earlier allows remote attackers to hijack the authentication of administrators for requests that move comments to the moderation list.

Remediation

References

CVE-2013-7233

Related Vulnerabilities

WordPress Plugin Debug Log Manager Information Disclosure (2.2.2)

WordPress Plugin We�re Open! Cross-Site Scripting (1.41)

MySQL CVE-2020-2584 Vulnerability (CVE-2020-2584)

Magento Insufficient Verification of Data Authenticity Vulnerability (CVE-2019-8124)

WordPress Plugin PublishPress Future: Automatically Unpublish WordPress Posts Multiple Vulnerabilities (2.1.1)

Severity

Medium

Classification

CVE-2013-7233 CWE-352

Tags

Missing Update Known Vulnerabilities